chore(deps): update all minor and patch dependencies

Author: renovate[bot]

.github/renovate.json5

@@ -2,7 +2,7 @@
   $schema: 'https://docs.renovatebot.com/renovate-schema.json',
   extends: [
     'config:recommended',
-    'github>aquaproj/aqua-renovate-config#2.8.2',
+    'github>aquaproj/aqua-renovate-config#2.9.0',
   ],
   labels: [
     'dependencies',

.github/workflows/wc-add-labels.yml

@@ -20,7 +20,7 @@ jobs:
       # to trigger other Actions caused by adding reviewapp Label
       - name: Generate token
         id: app-token
-        uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}

.github/workflows/wc-build-image.yml

@@ -82,7 +82,7 @@ jobs:
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
+        uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5.9.0
         with:
           images: ${{ steps.login-ecr.outputs.registry }}/${{ inputs.image_name }}
           tags: |
@@ -107,7 +107,7 @@ jobs:
           platforms: ${{ inputs.platforms }}
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@f9424c10c36e288d5fa79bd3dfd1aeb2d6eae808 # 0.33.0
+        uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
         if: ${{ inputs.run-trivy == true }}
         with:
           image-ref: ${{ steps.login-ecr.outputs.registry }}/${{ inputs.image_name }}:commit-${{ github.sha }}

.github/workflows/wc-cleanup-ecs-reviewapps.yml

@@ -42,7 +42,7 @@ jobs:
 
       - name: Generate token
         id: app-token
-        uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
@@ -133,7 +133,7 @@ jobs:
 
       - name: Create and Merge Pull Request
         if: steps.check-diff.outputs.changes == 'true'
-        uses: "actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea" # v7.0.1
+        uses: "actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b" # v7.1.0
         with:
           github-token: ${{ steps.app-token.outputs.token }}
           script: |

.github/workflows/wc-lint-actions.yml

@@ -38,7 +38,7 @@ jobs:
         with:
           persist-credentials: false
       - name: actionlint
-        uses: reviewdog/action-actionlint@e37e2ca68a70112d21e135229272da28ce2d0d5a # v1.66.1
+        uses: reviewdog/action-actionlint@f00ad0691526c10be4021a91b2510f0a769b14d0 # v1.68.0
         with:
           reporter: github-pr-review
           fail_level: ${{ inputs.reviewdog-fail-level }}
@@ -72,9 +72,9 @@ jobs:
       - name: place aqua.yaml to install some tools
         run: |
           curl -sSL https://raw.githubusercontent.com/cloudnativedaysjp/reusable-workflows/refs/heads/main/aqua.yaml -o "$HOME/aqua.yaml"
-      - uses: aquaproj/aqua-installer@d1fe50798dbadd4eb5b98957290ca175f6b4870f # v4.0.2
+      - uses: aquaproj/aqua-installer@11dd79b4e498d471a9385aa9fb7f62bb5f52a73c # v4.0.4
         with:
-          aqua_version: v2.53.9
+          aqua_version: v2.55.1
         env:
           AQUA_GITHUB_TOKEN: ${{github.token}}
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0

.github/workflows/wc-push-new-tag.yml

@@ -22,7 +22,7 @@ jobs:
       # to trigger other Actions caused by adding reviewapp Label
       - name: Generate token
         id: app-token
-        uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}

.github/workflows/wc-release-new-version.yml

@@ -18,7 +18,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Release
-        uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2.3.2
+        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
         with:
           generate_release_notes: true
           tag_name: ${{ github.ref_name }}

.github/workflows/wc-remove-label.yml

@@ -21,7 +21,7 @@ jobs:
       issues: write
     timeout-minutes: 3
     steps:
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
         with:
           script: |
             const targetLabel = '${{ inputs.target-label }}';

.github/workflows/wc-update-ecs-manifest.yml

@@ -52,7 +52,7 @@ jobs:
 
       - name: Generate token
         id: app-token
-        uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
@@ -148,7 +148,7 @@ jobs:
 
       - name: Commit files
         if: steps.check-diff.outputs.changes == 'true'
-        uses: suzuki-shunsuke/commit-action@ca8e761ccb3533295065c3e90a8555fcdde8b467 # v0.0.10
+        uses: suzuki-shunsuke/commit-action@594ab8a77a09357afe86bca600a98ab4b3b9547e # v0.0.13
         with:
           repository: cloudnativedaysjp/dreamkast-infra
           branch: gitops/${{ inputs.environment }}/${{ github.repository }}/${{ env.UNIXTIME }}
@@ -158,7 +158,7 @@ jobs:
 
       - name: Create and merge PR
         if: steps.check-diff.outputs.changes == 'true'
-        uses: "actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea" # v7.0.1
+        uses: "actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b" # v7.1.0
         with:
           github-token: ${{ steps.app-token.outputs.token }}
           script: |

aqua.yaml

@@ -1,6 +1,6 @@
 registries:
 - type: standard
-  ref: v4.407.0 # renovate: depName=aquaproj/aqua-registry
+  ref: v4.433.0 # renovate: depName=aquaproj/aqua-registry
 
 packages:
   - name: suzuki-shunsuke/[email protected]